Validate that deny-packages purls are complete

actions · Apr 29, 2024 · 5f0808f · 5f0808f
1 parent fcc66c2
commit 5f0808f
Show file tree

Hide file tree

Showing 4 changed files with 27 additions and 1 deletion.
diff --git a/__tests__/config.test.ts b/__tests__/config.test.ts
@@ -60,6 +60,14 @@ test('it raises an error when an invalid package-url is used for deny-packages',
   await expect(readConfig()).rejects.toThrow(`Error parsing package-url`)
 })
 
+test('it raises an error when a nameless package-url is used for deny-packages', async () => {
+  setInput('deny-packages', 'pkg:npm/@namespace/')
+
+  await expect(readConfig()).rejects.toThrow(
+    `Error parsing package-url: name is required`
+  )
+})
+
 test('it raises an error when an argument to deny-groups is missing a namespace', async () => {
   setInput('deny-groups', 'pkg:npm/my-fun-org')
 

diff --git a/dist/index.js b/dist/index.js
diff --git a/dist/index.js.map b/dist/index.js.map
diff --git a/src/schemas.ts b/src/schemas.ts
@@ -18,6 +18,12 @@ const PackageURL = z
         message: `Error parsing package-url: ${purl.error}`
       })
     }
+    if (!purl.name) {
+      context.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `Error parsing package-url: name is required`
+      })
+    }
   })
 
 const PackageURLWithNamespace = z